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What is Claimed is: 

1 . A method for verifying correctness of a component comprising: 

1 fl^ 

receiving a number of randomly selected samples, M, Af > — In ~ , 

e ^SJ 

5 wherein 

6 represents a confidence value in the range 0 < 8 < 1, 

8 represents an accuracy level of p-est to its true value p, in the range 0 < 8 < 1, 
p represents a probability that a randomly selected point is in accordance with a 
selected criterion, F, 

10 p-est, an estimate of p based on M randomly selected samples, is zero, 

and a probability that ( p > e) is equal to or less than 6; 
determining if each of said randomly selected samples is not in accordance with said 
selected criterion, F; and 

verifying correctness of said component based on said determining. 

15 

2. The method of Claim 1, further comprising: 

determining that said component is not verified as correct if any one of said selected 
samples is in accordance with said selected criterion F; and 

determining that said component is verified as correct if all of said selected samples are 
20 not in accordance with said selected criterion, F. 
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3. The method of Claim 2, wherein said samples are points, F uses a function f(x) 
where x is one of said points corresponding to one or more neural network inputs, f(x) is a 
neural network output for a corresponding one of said points, and said criterion F is that f(x) 
evaluates to a value that exceeds predetermined bounds. 

4. The method of Claim 2, wherein said samples are points, F uses an error function e(x) 
represented as: 

e(x) = f(x)-(p(x) 

where x is one of said points corresponding to one or more neural network inputs, 
f(x) is a neural network output for a corresponding one of said points, 
(p(x) is an expected output for a corresponding one of said points, and 

wherein said criterion F is that e(x) evaluates to a value that exceeds predetermined bounds. 

5. The method of Claim 2, wherein said component is one of: a neural network, a fuzzy 
logic model, a fuzzy logic classifier, and a statistical k-neighbor classifier. 

6. The method of Claim 2, wherein said component is included in a system with at least 
one other component. 
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7. The method of Claun 6, wherein said component is a first component, and an output 
of a second component is used as an input to the first component, and the method further 
comprising: 

determining whether said first component is verified as correct in accordance with error 
5 that may be introduced by said second component's output. 

8. The method of Claim 6, wherein said component is a first component, and correctness 
of a second component is verified using said M samples, said second component producing an 
output which is an input to a third component, and the method fiirther comprising: 

10 determining if each of said randomly selected samples is in accordance with said selected 

criterion, F for said second component; and 

determining that said second component is verified as correct unless a predetermined 
number, b, of said selected samples are in accordance with said selected criterion F, b being 
equal to or greater than 1 . 

15 

9. The method of Claim 2, wherein said component is included in a system of an aircraft 
being evaluated in accordance with a certification. 

10. The method of Claun 9, wherein 5 and e are both equal to or less than 10'^. 

20 

11. The method of Claim 10, wherein e is equal to or less than 10'^. 
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12. A method for determining a number of randomly selected data values for verification 
of a component comprising: 

receiving a value of zero for p-est, an estimate of p based on a random sample, p 
representing a probability that a randomly selected data value is in accordance with a selected 
criterion, F; 

receiving 6 representing a confidence value in the range 0< 6< 1 ; 

receiving £ representing an accuracy level of p-est to its true value p, in the range 
0< 8 < 1, wherein a probability that (p > e) is equal to or less than 5; and 

determining said nimiber of randomly selected data values, M, used for verification of a 
component wherein M is determined in accordance with p-est=0, 5, and 8. 

13. The method of Claim 12, wherein said component is a neural network. 

14. The method of Claim 13, wherein said neural network is a feed forward static neural 
network. 

15. The method of Claim 12, wherein M is determined according to one of: a Bernoulli 
analysis based on p-est=0 and a Bayesian analysis based on p-est=0. 

16. The method of Claim 15, wherein M is determined according to said BemouUi 



analysis and M is Af > — In — 

s 
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17. The method of Claim 15, wherein M is determined according to said Bayesian 

1 fi\ 

analysis with a non-informative prior distribution, and M is Af > — In — - 1 . 



18. The method of Claim 15, wherein M is determined according to said Bayesian 
5 analysis using a family of parameterized prior probability density functions, and M is 
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19. A computer program product that verifies correctness of a component comprising 
code that: 

1 fl^ 

receives a number of randomly selected samples, M, M > — In — , 

€ ^SJ 

wherein 

5 5 represents a confidence value in the range 0 < 5 < 1 , 

E represents an accuracy level of p-est to its true value p, in the range 0 < e < 1 , 
p represents a probability that a randomly selected point is in accordance with a 
selected criterion, F, 

p-est, an estimate of p based on M randomly selected samples, is zero, 
10 and a probability that ( p > s) is equal to or less than 5; 

determines if each of said randomly selected samples is not in accordance with said 
selected criterion, F; and 

verifies correctness of said component based on whether each of said randomly selected 
samples is in not in accordance with said selected criterion F. 

15 

20. The computer program product of Claim 19, fiirther comprising code that: 
determines that said component is not verified as correct if any one of said selected 

samples is in accordance with said selected criterion F; and 

determines that said component is verified as correct if all of said selected samples are 
20 not in accordance with said selected criterion, F. 
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21 . The computer program product of Claim 20, wherein said samples are points, F uses 
a function f(x) where x is one of said points corresponding to one or more neural network 
inputs, f(x) is a neural network output for a corresponding one of said points, and said criterion F 
is that f(x) evaluates to a value that exceeds predetermined bounds. 

22. The computer program product of Claim 20, wherein said samples are points, F uses 
an error function e(x) represented as: 

e(x) = f(x)-cp(x) 

where x is one of said points corresponding to one or more neural network inputs, 
f(x) is a neural network output for a corresponding one of said points, 
(p(x) is an expected output for a corresponding one of said points, and 

wherein said criterion F is that e(x) evaluates to a value that exceeds predetermined bounds. 

23. The computer program product of Claim 20, wherein said component is one of: a 
neural network, a fiizzy logic model, a fuzzy logic classifier, and a statistical k-neighbor 
classifier. 

24. The computer program product of Claim 20, wherein said component is included in a 
system with at least one other component. 

25. The computer program product of Claim 24, wherein said component is a first 
component, and an output of a second component is used as an input to the first component, and 
the computer program product further comprising code that: 
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determines whether said first component is verified as correct in accordance with error 
that may be introduced by said second component's output. 

26. The computer program product of Claim 24, wherein said component is a first 

5 component, and correctness of a second component is verified using said M samples, said second 

component producing an output which is an input to a third component, and the computer 

program product further comprising code that: 

determines if each of said randomly selected samples is in accordance with said selected 

criterion, F for said second component; and 
10 determines that said second component is verified as correct unless a predetermined 

number, b, of said selected samples are in accordance with said selected criterion F, b being 

equal to or greater than 1 . 

27. The computer program product of Claim 20, wherein said component is included in a 
15 system of an aircraft being evaluated in accordance with a certification. 

28. The computer program product of Claim 27, wherein 5 and e are both equal to or 
less than 10"^. 

20 29. The computer program product of Claim 28, wherein e is equal to or less than 10*^. 
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30. A computer program product that determines a number of randomly selected data 
values for verification of a component comprising code that: 

receives a value of zero for p-est, an estimate of p based on a random sample, p 
5 representing a probability that a randomly selected data value is in accordance with a selected 
criterion, F; 

receives 6 representing a confidence value in the range 0< 5< 1 ; 
receives e representing an accuracy level of p-est to its true value p, in the range 
0< 8 < 1, wherein a probability that (p > e) is equal to or less than 5; and 
10 determines said number of randomly selected data values, M, used for verification of a 

component wherein M is determined in accordance with p-est=0, 5, and s. 



network. 

15 

32. The computer program product of Claim 31, wherein said neural network is a feed 
forward static neural network. 

33. The computer program product of Claim 30, wherein M is determined according to 
20 one of: a BemouUi analysis based on p-est=0 and a Bayesian analysis based on p-est=0. 



31. The computer program product of Claim 30, wherein said component is a neural 



34. The computer program product of Claim 33, wherein M is determined according to 



said Bernoulli analysis and M is M > — hij 
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35. The computer program product of Claim 33, wherein M is determined according to 



said Bayesian analysis with a non-informative prior distribution, and M is Af > — In 

€ 



36. The computer program product of Claim 33, wherein M is determined according to 
said Bayesian analysis using a family of parameterized prior probability density functions, and M 



is M>^ln 

£ 
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